Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a3a2f33322d3334203d3e20323732343439.roa
File:                     323830343a383135633a3a2f33322d3334203d3e20323732343439.roa (raw, json)
Hash identifier:          m/YNOIUHzYO8sj8kIDGc8618LMng08+qTyd6LTithLQ=
Subject key identifier:   24:12:98:C3:31:56:1B:B6:39:95:53:C7:D5:26:7B:EB:E9:F7:21:71
Certificate issuer:       /CN=8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB
Certificate serial:       19839CD28E1463057F9770E925FFDC81B05E0B75
Authority key identifier: 8D:EA:A3:66:A5:02:5F:2C:71:8D:F5:BD:C1:5A:5D:48:79:1A:D3:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a3a2f33322d3334203d3e20323732343439.roa
Signing time:             Tue 13 Jun 2023 17:53:36 +0000
ROA not before:           Tue 13 Jun 2023 17:48:36 +0000
ROA not after:            Tue 11 Jun 2024 17:53:36 +0000
asID:                     272449
IP address blocks:        2804:815c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:83:9c:d2:8e:14:63:05:7f:97:70:e9:25:ff:dc:81:b0:5e:0b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB
        Validity
            Not Before: Jun 13 17:48:36 2023 GMT
            Not After : Jun 11 17:53:36 2024 GMT
        Subject: CN=241298C331561BB6399553C7D5267BEBE9F72171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:8a:d7:6b:5e:04:70:49:f1:d7:c9:b9:61:
                    84:f2:d3:8b:c7:4f:55:dc:07:93:af:5a:a2:27:1b:
                    c8:7d:a1:7c:ea:a4:c3:5c:83:98:25:e0:6d:d1:e6:
                    b1:3d:0a:c1:a4:00:cb:c6:c1:9d:8d:68:e5:72:2b:
                    fc:10:52:8c:8c:57:a6:5b:14:04:f1:2a:46:17:3e:
                    7e:49:32:b2:8e:c1:ce:75:f1:8d:6e:14:21:e6:07:
                    ee:e1:2e:3d:8b:49:37:25:6e:ca:2b:a0:62:95:d7:
                    8a:b8:ea:b3:8e:7a:ec:33:61:61:7b:4b:da:f3:91:
                    96:7f:db:a3:ee:bf:9b:2c:c2:70:90:d6:80:0f:93:
                    b2:62:d0:b5:89:3f:ce:bc:17:68:c6:27:b3:5d:6d:
                    19:36:98:b7:e7:a8:9d:77:6c:be:ae:78:d2:e6:ef:
                    00:b1:15:04:44:4c:6a:36:be:53:e9:67:55:c2:28:
                    2a:b6:37:4e:03:f8:58:12:d9:2b:fa:62:eb:cd:b4:
                    8e:d8:83:33:9b:9c:8b:60:c7:ae:b0:fe:52:26:ea:
                    dc:bf:99:6a:06:b5:5a:bb:b2:6f:43:c4:ab:f9:2f:
                    ce:b8:9a:7c:33:ce:b1:61:c7:6c:41:f2:44:75:8c:
                    41:37:39:cc:64:56:bc:b6:85:69:c7:39:77:8a:6b:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:12:98:C3:31:56:1B:B6:39:95:53:C7:D5:26:7B:EB:E9:F7:21:71
            X509v3 Authority Key Identifier:
                keyid:8D:EA:A3:66:A5:02:5F:2C:71:8D:F5:BD:C1:5A:5D:48:79:1A:D3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a3a2f33322d3334203d3e20323732343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:815c::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:70:24:ec:00:72:d6:49:ab:e1:83:f2:fe:df:05:63:aa:9b:
         82:c3:bc:16:df:65:72:35:1c:78:e1:47:c8:fd:9c:c7:aa:75:
         8a:16:c4:f7:7c:aa:c0:3a:48:1b:28:8c:00:a5:61:b7:54:46:
         e3:38:6d:a6:c4:01:85:26:7c:21:fa:fd:50:41:00:7f:eb:ce:
         9c:a8:4e:2c:87:ee:f0:80:b8:17:04:f3:5c:61:bd:31:6d:fa:
         40:48:f7:be:12:57:70:da:9d:c7:43:9b:83:b0:c4:e9:60:6a:
         2e:3c:47:22:18:fa:49:29:3b:56:3d:87:48:b1:82:aa:db:25:
         11:f6:a9:e8:59:c9:20:c7:f8:27:ff:f9:e0:b5:6f:3e:f8:23:
         33:63:a1:e5:27:b1:eb:29:b9:53:8a:91:75:29:10:26:b6:27:
         8b:c5:d0:e1:b9:f8:10:6d:c5:e8:9b:ac:3d:de:34:ba:a7:7e:
         3f:4a:b4:c0:34:ed:a0:a2:b0:fe:3d:db:82:72:41:55:8a:5d:
         2b:f9:c8:82:55:4e:59:48:55:fb:59:f4:69:cf:5d:1c:21:f8:
         68:55:c4:18:0d:ec:2b:1b:2b:56:30:10:38:32:5f:88:12:49:
         e3:6a:f9:4c:00:5d:23:e6:89:57:60:ec:4e:f9:7a:c0:d8:bf:
         08:f5:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org